What is claimed is: 



1\ A method for controlling anomalous dual state of duplicated 
processors tor a fault-tolerant system having a first and a second processors that 
5 are connected to each other through network, comprising: 

a first s\ep of transmitting its own state information of either the first or the 
second processor to mutually another processor (twin) by using different 
transmission period to each other; 

a second stfep of receiving the heartbeat applied from the other processor 
10 and recognizing state^nformation of the twin; and 

a third step c^f performing duplication states according to the state 
information of the twin. 



2. The metho\l according to claim 1, wherein the first step includes 
15 sub-steps of: 

generating a heartbeat transmission period by using random numbers; 
scheduling and starting a timer on the basis of the generated random 
period; and 

transmitting a heartbeat \to the other processor after time tuned by a 
20 generated random number lapses. 
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3. The method according to claim 2, wherein when the random 
period is generated, in order for the first and the second processors to have the 
different tuned period to each other, different seeds for random numbers are 
allocated to each other, when a system is initialized. 
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The method according to claim 2, further comprising a step of: 
stopping the timer in case that state change occurs before the period tuned by a 
generated random number lapses, and immediately transmitting a corresponding 
heartbeat to the other processor 
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5. The method according to claim 2, wherein the period tuned by a 
generated random\ number of the heartbeat is determined so that only one 
heartbeat message\at its maximum exists in a corresponding heartbeat 
10 transmission path at the point of a specific time.. 

The method according to claim 4, wherein the period tuned by a 
generated Yandom number of the heartbeat is determined by a value changed 
from a fixedVieartbeat transmission period in consideration of a corresponding 
is heartbeat transmission time, a heartbeat processing time and a state transition 
time. 



7. The ft^ttiod according to claim 6, wherein assuming that a fixed 
heartbeat transmi§6ion\period is 'x\ the heartbeat transmission time is 'a', the 
20 heartbeat processing tinrte is 'b' and the state transition time is 'c\ the variable 
heartbeat transmission p^iod is determined in the range from x-(2a+b+c) to 
x+(2a+b+c). 




P(\ ^. The method according to claim 1, wherein the second step 

25 comprisingMhe sub-steps of: 
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waiting for receiving the heartbeat for a predetermined time; 
recognizing a receipt of the heartbeat; and 

judging, that the twin has gone down if no heartbeat is received within a 
predetermined time. 



9. The method according to claim 8, wherein the predetermined time 
refers to a value sufficiently greater than the maximum value that can be held by 
the period tuned by a generated random number for a heartbeat transmission. 

10. Duplicated processors on a fault-tolerant system having a first and 
a second processors tha\ are mutually connected through a network, wherein 
each processor comprising:\ 

an outgoing heartbeat processing block for transmitting a heartbeat 
including its own state information to the other processor (twin) by using a different 
transmission period to each other; 

an incoming heartbeat processing block for receiving the heartbeat from 
the other processor and recognizing the state information of the twin; and 

a duplication FSM processing block for performing duplication states 
processing according to the state information of the twin. 

11. The processor according to claim 10, wherein the outgoing 
heartbeat processing block includes a Yandom number generator to continuously 
change the transmission period of the heartbeat. 



12. The processor according to claim 11, wherein when the random 
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period k generated, in order for the first and the second processors to have the 
different turned period to each other, different seeds for random numbers are 
allocated t© each other, when a system is initialized. 
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13. \ The processor according to claim 11, wherein the period turned by 
a generated random number of the heartbeat is determined so that only one 
heartbeat message at its maximum exists in a corresponding heartbeat 
transmission path\at a specific time point. 

14. TheWocessor according to claim 11, wherein the period turned by 
a generated random\number of the heartbeat is determined by a value changed 
from a fixed heartbeat transmission period in consideration of a corresponding 
heartbeat transmission\time, a heartbeat processing time and a state transition 
time. 



15. The processor according to claim 14, wherein assuming that a 
fixed heartbeat transmission\period is 'x\ the heartbeat transmission time is ( a\ the 
heartbeat processing time is\'b' and the state transition time is 'c', the variable 
heartbeat transmission perioc\ is determined in the range from x-(2a+b+c) to 
20 x+(2a+b+c). 
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16. A method for transmitting a heartbeat of duplicated processors on 
a fault-tolerant system having a first and a second processors that are connected 
through network, in which the first and the second processors use different 
transmission periods to transmit heartbeats. 
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The method according to claim 16, wherein in order to generate 
different transmission periods to each other, different seeds for random numbers 
are allocates to the first and the second processors to thereby generate random 
5 numbers, by which a heartbeat transmission period is generated. 

18. The method according to claim 17, wherein the period turned by a 
generated random number of the heartbeat is determined so that only one 
heartbeat message at its maximum exists in a corresponding heartbeat 

10 transmission path at\the point of a specific time. 

19. The method according to claim 17, wherein the period turned by a 
generated random number of the heartbeat is determined by a value changed 
from a fixed heartbeat transmission period in consideration of a corresponding 

15 heartbeat transmission time, a heartbeat processing time and a state transition 
time. \ 

20. The method according to claim 19, wherein assuming that a fixed 
heartbeat transmission period is 'x\ the heartbeat transmission time is 'a\ the 

20 heartbeat processing time is f b' and the state transition time is 'c\ the variable 
heartbeat transmission period of tha heartbeat is determined in the range from x- 
(2a+b+c) to x+(2a+b+c). * 



19 



